SSL Decryption

1. SSL decryption performance only applies to SSL traffic - the limiting factor is the SSL encryption/decryption engine so other traffic is not impacted. 2. SSL decryption performance is different for SSL forward proxy vs inbound inspection. 3. The performance will vary based on response sizes...smaller response sizes will have lower performance than bigger response sizes. Overall, it is important that you work with your local Palo Alto Networks systems engineer to fully understand SSL decryption performance. Having said that, here are rough performance levels for forwarding proxy decryption with 64KB response sizes: PA-4000 Series: 380Mbps PA-2000 Series: 70Mbps PA-500: 90Mbps Inbound SSL inspection is roughly 2X the performance of forward proxy.